McAfee SG310, Руководство администратора

Страница: 42 / 412

42 McAfee UTM Firewall 4.0.4 Administration Guide
Network Setup menu options
Quick Setup wizard
Quick Setup wizard
A Quick Setup wizard is provided to assist you in configuring your UTM Firewall device for the first time. The
Quick Setup wizard also provides Guided Configurations to assist you with some of the more complex
configuration scenarios. Using the Quick Start wizard is covered in the Quick Installation Guide that
accompanied your UTM Firewall device, and in Chapter 2, Getting Started, beginning with
Connecting an
administrative PC to the device .
Network setup
The Network Setup tab provides options for configuring network connections, failover and high-availability
settings, routes, DNS proxies and IP protocol settings.
Multifunction vs. fixed-function ports
Some UTM Firewall appliances have network ports with labels corresponding to the port’s function, such as
LAN, DMZ, and Internet/WAN. These are said to be fixed-function ports.
Alternatively, some UTM Firewall appliances have network ports that are generically labeled; for example,
port A, port B, port C. These are said to be multifunction ports. This reflects the ability of these ports to
perform different functions; for example, port B is not limited to connecting to the Internet only, it can be
configured as a LAN connection. Before configuring multifunction ports, determine which function you are
assigning to each of the ports.
The SG560, SG560U, SG565, and SG580 models have generically named Ethernet ports (ports A1, A2, A3,
A4 and B). By default, switch A functions as a regular LAN switch, with network traffic passing freely
between its ports. Typically, port B is used as your primary Internet connection. However, switch A’s ports
can be configured individually to perform separate functions. For example, port A2 can be a configured to
connect to a second LAN, port A3 can be configured as a DMZ port, and port A4 can be configured as a
secondary Internet connection. These per-port configuration scenarios are accomplished using VLANs
(Virtual Local Area Networks). For information about the advanced use of the VLAN capability of your UTM
Firewall appliance, refer to
VLAN and Port-Based VLANs .
Connections
Under the Connections tab, each of your UTM Firewall appliance’s network interfaces is displayed alongside
its physical Port name and the Current Details of its configuration (
Figure 35 ).
Initially, all network interfaces are unconfigured, aside from a single LAN connection on the initial setup
port (Switch A on UTM Firewall appliances SG560, SG560U, SG565, and SG580; the LAN port on other
models).
This page displays a list of the physical and virtual network interfaces of the UTM Firewall unit, as well as
the network connections that have been configured for these interfaces.
Network interfaces can be physical interfaces such as Ethernet ports or serial ports. They can also be virtual
interfaces such as bridges, GRE tunnels, or VLANs.
To configure a network connection, you need to specify the configuration details that will enable the
network interface to be used for routing. The simplest network connections are static or dynamic IP
addresses. More advanced network connections allow you to communicate with cable, ADSL, or serial
modems that are connected to your UTM Firewall appliance.